tweaked the default permissions;

guests can read pages, read posts, read albums, and read photos, so cancan automatically allows that